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(54) VERIFICATION SYSTEM FOR AD HOC WIRELESS COMMUNICATION 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a verification system for ad hoc wireless 
communication that can simply verify data integrity in data transmission reception by 
ad hoc wireless connection. 

SOLUTION: A request source and a request destination for opening an encryption 
communication path are respectively defined to be a transmission source A and a 
transmission destination B. A verification data generating algorithm ID 1 is arranged in 
advance between the parties A, B. The A transmits e.g. a public key Kp of the A to 
the B, generates verification data Xp from the public key Kp by using the algorithm ID 
1 and outputs the data to its own verification image display section 27. The B 
receives the data Kx sent from the A as the key Kp, generates verification data Xx 
from the Kx by using the ID 1 and outputs the data to its own verification image 
display section 27. A verifier discriminates that there exists data integrity when the 
Xp, Xx of the verification image display sections 27 of the parties A, B are coincident. 
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CLAIMS 



[Claim(s)] 

[Claim 1] The data for identity data generation to another side from one side of two 
data transmission-and-reception equipments mutually connected by ad hoc wireless 
connection with delivery and one data transmission-and-reception equipment The 
identity data generated based on the 1st generation algorithm from the transmitted 
data for identity data generation is made to output to one's identity data output 
section. With the data transmission-and-reception equipment of another side The 
identity data generated based on said 1st generation algorithm from the received data 
for identity data generation is made to output to one's identity data output section. 
The verification system for ad hoc radio characterized by judging whether the identity 
data in the identity data output section of both data transmission-and-reception 
equipment is mutually in agreement. 

[Claim 2] Said identity data is a verification system for ad hoc radio according to 
claim 1 characterized by being visual or acoustic-sense-identity data. 
[Claim 3] Identity data is a verification system for ad hoc radio according to claim 1 
characterized by being outputted with the output gestalt of visual and acoustic- 
sense-both in the detection data output section. 

[Claim 4] The input of this operator and the result of an operation of this operator are 
defined for the numeric value on which a operator and this operator act a function as 



the output of this operator. The same or the serial operator train which arranged in 
one or more pieces and a serial a different operator which starts a tropism function 
on the other hand is established. The verification system for ad hoc radio according 
to claim 1 to 3 characterized by using the input of this serial operator train as the 
data for identity data generation, and using the output or its correspondence value of 
this serial operator train as identity data. 

[Claim 5] Said 1 st generation algorithm is a verification system for ad hoc radio 
according to claim 1 to 3 characterized by judging whether two or more identity data 
is generated and the things in the identity data output section of both data 
transmission-and-reception equipment are mutually in agreement about each identity 
data. 

[Claim 6] The input of this operator and the result of an operation of this operator are 
defined for the numeric value on which a operator and this operator act a function as 
the output of this operator. The same or the serial operator train which arranged in 
two or more pieces and a serial a different operator which starts a tropism function 
on the other hand is established. Use the input of this serial operator train as the 
data for identity data generation, and the output of two or more operators chosen 
from all the operators that constitute this serial operator train, or its correspondence 
value is used as identity data, respectively. The verification system for ad hoc radio 
according to claim 5 characterized by judging whether the things in the identity data 
output section of both data transmission-and-reception equipment are mutually in 
agreement about each identity data. 

[Claim 7] The input of this operator and the result of an operation of this operator are 
defined for the numeric value on which a operator and this operator act a function as 
the output of this operator. Prepare two or more mutually different operators which 
start a tropism function on the other hand, and the data for identity data generation 
are considered as the common input of each operator. The verification system for ad 
hoc radio according to claim 5 which uses the output or its correspondence value of 
each operator as identity data, respectively, and is characterized by judging whether 
the things in the identity data output section of both data transmission-and-reception 
equipment are mutually in agreement about each identity data. 
[Claim 8] Said data for identity data generation are a verification system for ad hoc 
radio according to claim 1 to 7 characterized by being the public key of one data 
transmission-and-reception equipment. 

[Claim 9] The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function by said ad hoc radio verification system to the personal digital 
assistant with a radio function of the user of another side is verified A public key Kp 



is transmitted to a personal computer with a radio function from a personal digital 
assistant with a radio function in each user. The personal computer with a radio 
function of the user of another side The common key Kc is generated from the 2nd 
generation algorithm. One user's personal computer with a radio function Based on 
the information transmitted using the code by the public key from the personal 
computer with a radio function of the user of another side, the common key Kc is 
generated from the 2nd generation algorithm. The personal computer with both the 
radio function is a data transmission-and-reception system for ad hoc radio using the 
verification system for ad hoc radio according to claim 8 characterized by sending and 
receiving data in the code based on the common key Kc henceforth. 
[Claim 10] The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function by said ad hoc radio verification system to the personal digital 
assistant with a radio function of the user of another side is verified The personal 
digital assistant with a radio function of the user of another side The common key Kc 
is generated from the 2nd generation algorithm. One user's personal digital assistant 
with a radio function Based on the information transmitted using the code by the 
public key from the personal digital assistant with a radio function of the user of 
another side, the common key Kc is generated from the 2nd generation algorithm. The 
common key Kc is transmitted to a personal computer with a radio function from a 
personal digital assistant with a radio function in each user. Next, the personal 
computer with both the radio function Henceforth, the data transmission-and- 
reception system for ad hoc radio using the verification system for ad hoc radio 
according to claim 8 characterized by sending and receiving data in the code based 
on the common key Kc. 

[Claim 1 1] The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function to the personal digital assistant with a radio function of the user 
of another side is verified A public key Kp is transmitted to a personal computer with 
a radio function from a personal digital assistant with a radio function in each user. 
The personal computer with a radio function of the user of another side The common 
key Kc is generated based on the 2nd generation algorithm from a public key Kp. One 
user's personal computer with a radio function Based on the information transmitted 
using the code by the public key from the personal computer with a radio function of 
the user of another side, the common key Kc is generated from the 2nd generation 



algorithm. The personal computer with both the radio function is a data transmission- 
and-reception system for ad hoc radio characterized by sending and receiving data in 
the code based on the common key Kc henceforth. 

[Claim 12] The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function to the personal digital assistant with a radio function of the user 
of another side is verified The personal digital assistant with a radio function of the 
user of another side The common key Kc is generated from the 2nd generation 
algorithm. One user's personal digital assistant with a radio function Based on the 
information transmitted using the code by the public key from the personal digital 
assistant with a radio function of the user of another side, the common key Kc is 
generated from the 2nd generation algorithm. Next, the common key Kc is a data 
transmission-and-reception system for ad hoc radio which is transmitted to a 
personal computer with a radio function from a personal digital assistant with a radio 
function in each user, and is characterized by the personal computer with both the 
radio function sending and receiving data in the code based on the common key Kc 
henceforth. 

[Claim 13] The data for identity data generation to another side from one side of two 
data transmission-and-reception equipments mutually connected by ad hoc wireless 
connection with delivery and one data transmission-and-reception equipment The 
identity data generated based on the 1 st generation algorithm from the transmitted 
data for identity data generation is made to output to one's identity data output 
section. With the data transmission-and-reception equipment of another side The 
identity data generated based on said 1st generation algorithm from the received data 
for identity data generation is made to output to one's identity data output section. 
The verification approach for ad hoc radio characterized by judging whether the 
identity data in the identity data output section of both data transmission-and- 
reception equipment is mutually in agreement. 

[Claim 14] Said identity data is the verification approach for ad hoc radio according to 
claim 13 characterized by being visual or acoustic-sense-identity data. 
[Claim 1 5] Identity data is the verification approach for ad hoc radio according to 
claim 13 characterized by being outputted with the output gestalt of visual and 
acoustic-sense-both in the detection data output section. 

[Claim 16] The input of this operator and the result of an operation of this operator 
are defined for the numeric value on which a operator and this operator act a function 
as the output of this operator. The same or the serial operator train which arranged in 
one or more pieces and a serial a different operator which starts a tropism function 
on the other hand is established. The verification approach for ad hoc radio according 



to claim 13 to 15 characterized by using the input of this serial operator train as the 
data for identity data generation, and using the output or its correspondence value of 
this serial operator train as identity data. 

[Claim 17] Said 1st generation algorithm is the verification approach for ad hoc radio 
according to claim 13 to 15 characterized by judging whether two or more identity 
data is generated and the things in the identity data output section of both data 
transmission-and-reception equipment are mutually in agreement about each identity 
data. 

[Claim 18] The input of this operator and the result of an operation of this operator 
are defined for the numeric value on which a operator and this operator act a function 
as the output of this operator. The same or the serial operator train which arranged in 
two or more pieces and a serial a different operator which starts a tropism function 
on the other hand is established. Use the input of this serial operator train as the 
data for identity data generation, and the output of two or more operators chosen 
from all the operators that constitute this serial operator train, or its correspondence 
value is used as identity data, respectively. The verification approach for ad hoc radio 
according to claim 17 characterized by judging whether the things in the identity data 
output section of both data transmission-and-reception equipment are mutually in 
agreement about each identity data. 

[Claim 19] The input of this operator and the result of an operation of this operator 
are defined for the numeric value on which a operator and this operator act a function 
as the output of this operator. Prepare two or more mutually different operators 
which start a tropism function on the other hand, and the data for identity data 
generation are considered as the common input of each operator. The verification 
approach for ad hoc radio according to claim 17 which uses the output or its 
correspondence value of each operator as identity data, respectively, and is 
characterized by judging whether the things in the identity data output section of both 
data transmission-and-reception equipment are mutually in agreement about each 
identity data. 

[Claim 20] Said data for identity data generation are the verification approach for ad 
hoc radio according to claim 13 to 19 characterized by being the public key of one 
data transmission-and-reception equipment. 

[Claim 21] The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function by said ad hoc radio verification system to the personal digital 
assistant with a radio function of the user of another side is verified A public key Kp 
is transmitted to a personal computer with a radio function from a personal digital 
assistant with a radio function in each user. The personal computer with a radio 



function of the user of another side The common key Kc is generated from the 2nd 
generation algorithm. One user's personal computer with a radio function Based on 
the information transmitted using the code by the public key from the personal 
computer with a radio function of the user of another side, the common key Kc is 
generated from the 2nd generation algorithm. The personal computer with both the 
radio function is the data transmission-and-reception approach for ad hoc radio of 
using the verification approach for ad hoc radio according to claim 20 characterized 
by sending and receiving data in the code based on the common key Kc, henceforth. 
[Claim 22] The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function by said ad hoc radio verification system to the personal digital 
assistant with a radio function of the user of another side is verified The personal 
digital assistant with a radio function of the user of another side The common key Kc 
is generated from the 2nd generation algorithm. One user's personal digital assistant 
with a radio function Based on the information transmitted using the code by the 
public key from the personal digital assistant with a radio function of the user of 
another side, the common key Kc is generated from the 2nd generation algorithm. The 
common key Kc is transmitted to a personal computer with a radio function from a 
personal digital assistant with a radio function in each user. Next, the personal 
computer with both the radio function Henceforth, the data transmission-and- 
reception approach for ad hoc radio of using the verification approach for ad hoc 
radio according to claim 20 characterized by sending and receiving data in the code 
based on the common key Kc. 

[Claim 23] The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function to the personal digital assistant with a radio function of the user 
of another side is verified A public key Kp is transmitted to a personal computer with 
a radio function from a personal digital assistant with a radio function in each user. 
The personal computer with a radio function of the user of another side The common 
key Kc is generated based on the 2nd generation algorithm from a public key Kp. One 
user's personal computer with a radio function Based on the information transmitted 
using the code by the public key from the personal computer with a radio function of 
the user of another side, the common key Kc is generated from the 2nd generation 
algorithm. The personal computer with both the radio function is the data 
transmission-and-reception approach for ad hoc radio characterized by sending and 



receiving data in the code based on the common key Kc henceforth. 
[Claim 24] The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function to the personal digital assistant with a radio function of the user 
of another side is verified The personal digital assistant with a radio function of the 
user of another side The common key Kc is generated from the 2nd generation 
algorithm. One user's personal digital assistant with a radio function Based on the 
information transmitted using the code by the public key from the personal digital 
assistant with a radio function of the user of another side, the common key Kc is 
generated from the 2nd generation algorithm. Next, the common key Kc is the data 
transmission-and-reception approach for ad hoc radio which is transmitted to a 
personal computer with a radio function from a personal digital assistant with a radio 
function in each user, and is characterized by the personal computer with both the 
radio function sending and receiving data in the code based on the common key Kc 
henceforth. 

[Claim 25] The record medium which recorded the program for verification systems of 
the following contents for ad hoc radio. 

The data for identity data generation to another side from one side of two data 
transmission-and-reception equipments mutually connected by ad hoc wireless 
connection : With delivery and one data transmission-and-reception equipment The 
identity data generated based on the 1st generation algorithm from the transmitted 
data for identity data generation is made to output to one's identity data output 
section. With the data transmission-and-reception equipment of another side The 
identity data generated based on said 1 st generation algorithm from the received data 
for identity data generation is made to output to one's identity data output section, 
and it is judged whether the identity data in the identity data output section of both 
data transmission-and-reception equipment is mutually in agreement. 
[Claim 26] The record medium according to claim 25 which recorded the program for 
verification systems of the following contents for ad hoc radio. 
: Said identity data is visual or acoustic-sense-identity data. 

[Claim 27] The record medium according to claim 25 which recorded the program for 
verification systems of the following contents for ad hoc radio. 

: Identity data is outputted with the output gestalt of visual and acoustic-sense-both 
in the detection data output section. 

[Claim 28] The record medium according to claim 25 to 27 which recorded the 
program for verification systems of the following contents for ad hoc radio. 
: The input of this operator and the result of an operation of this operator are defined 
for the numeric value on which a operator and this operator act a function as the 



output of this operator, and the same or the serial operator train which arranged in 
one or more pieces and a serial a different operator which starts a tropism function 
on the other hand is established, use the input of this serial operator train as the data 
for identity data generation, and let the output or its correspondence value of this 
serial operator train be identity data. 

[Claim 29] The record medium according to claim 25 to 27 which recorded the 

program for verification systems of the following contents for ad hoc radio. 

: It is judged whether said 1st generation algorithm generates two or more identity 

data, and its things in the identity data output section of both data transmission-and- 

reception equipment correspond mutually about each identity data. 

[Claim 30] Distribution equipment which distributes the program for verification 

systems of the following contents for ad hoc radio. 

The data for identity data generation to another side from one side of two data 
transmission-and-reception equipments mutually connected by ad hoc wireless 
connection : With delivery and one data transmission-and-reception equipment The 
identity data generated based on the 1 st generation algorithm from the transmitted 
data for identity data generation is made to output to one's identity data output 
section. With the data transmission-and-reception equipment of another side The 
identity data generated based on said 1st generation algorithm from the received data 
for identity data generation is made to output to one's identity data output section, 
and it is judged whether the identity data in the identity data output section of both 
data transmission-and-reception equipment is mutually in agreement. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the verification system for ad hoc 
radio coping with the alteration of transmission data, the data transmission-and- 
reception system for ad hoc radio, the verification approach for ad hoc radio, the data 
transmission-and-reception approach for ad hoc radio, the record medium that 
recorded the program of correspondence on the list and that is reached and 
distributed, and distribution equipment. 
[0002] 

[Description of the Prior Art] When two unspecified persons transmit without a holder 
in bad faith altering data in the temporary short-distance radio which does not use a 
specific infrastructure like ad hoc radio, it is necessary to share the cryptographic 
key which is not in being known by the holder in bad faith. However, the method of 



setting up the value which serves as a radical of the cryptographic key at any time at 
the time of a communication link is complicated, and especially the thing for which 
communications partners exchange [ a communications partner ] cryptographic keys 
by oral, a memorandum, etc. under situations, such as the first meeting, is almost 
impractical. There is an approach share a public key first, and the public key 
enciphers and shares a cryptographic key as an approach of sharing a cryptographic 
key automatically. However, there is a risk of the Mann Inn THE middle attack (Man- 
in-the-middle attack: please refer to p.48 to p.50 of the title:application cryptography 
(APPLIED CRYPTOGRAPHY) of author blues SHUNAIA (BRUCE SCHNEIER) of John 
Willie - and - Suns firm (John Wiley & Sons, Inc) publication about the detail of the 
Mann Inn THE middle attack.). 

[0003] The outline of the risk of the data alteration in the Mann Inn THE middle 
attack is carried out. Drawing 1 shows the room to which holder-in-bad-faith C 
intervenes among both while the transmission place B has not noticed the 
transmitting agency A in the ad hoc radio communications system 10. If, as for A and 
B, direct and a channel are established among both as shown in (a), even if it 
considers, as shown in (b), in fact, the third person may be wedging himself among 
both. "Man-in-the-Middle Attack" mentions concretely how it performs, and explains 
an example. 

[0004] The general procedure of wireless cryptocommunication way establishment is 
as follows. 

Procedure 1: Appeal for a transmitting agency toward many and unspecified partners 

by ID of the transmission place which wants to communicate. 

Procedure 2: If a transmission place is in the range in which wireless connection is 

possible, the ID (that is, its ID) for which it appealed will be received. 

Procedure 3: A transmission place tells a self operating condition etc. to a 

transmitting agency. 

Procedure 4: Determine parameters [ required for channel establishment ] (selection 
of the channel to be used, a setup, exchange of a cryptographic key, etc.) of operation 
in both. 

Procedure 5: Channel establishment is carried out and two-way communication is 
started. 

[0005] What a holder in bad faith tends to enter the location of C of drawing 1 to is 
timing to which two persons set as the object of tapping start radio by confrontation. 
That is, it intervenes in the procedures 1-3 in which the above was enumerated. 
Drawing 2 and drawing 3 show an example of a means for a holder in bad faith to 
enter the location of C of drawing 1 . The transmitting agency A obtains an appeal 
colander by Specification ID for no surrounding transmission place candidates on the 
character of an electric wave (procedure 1). Since the appeal in its ID can be heard 
(procedure 2), the transmission place B answers the transmitting agency A 
(procedure 3). Here, a holder in bad faith is going to answer the appeal to ID other 



than himself, or perform appeal by ID other than himself, and plan the following 
**********. First, holder-in-bad-faith C throws the noise of the same frequency 
band at the response of the transmission place B, and the transmitting agency A 
prevents from catching the response. At this time, since the transmission place B 
does not know the fact of that noise, it changes for the above-mentioned procedure 4, 
and is waiting for the session initiation in the procedure 4 from the transmitting 
agency A. Since the transmitting agency A is not in a procedure 4, the transmission 
place B returns to the condition of hearing the appeal of one's ID again after a time- 
out. On the other hand, since the response from the transmission place B is not 
obtained by the transmitting agency A, that for which it appeals by the ID again same 
after a time-out (procedure 1) is common. That is, the transmitting agency A and the 
transmission place B begin to take the synchronization of a mutual procedure, utterly, 
will notice the failure by each time-out, and will return to the original condition. 
[0006] The transmitting agency A stands by according to the timing for which it 
appeals by the same ID again, and holder-in-bad-faith C stands by also according to 
the timing which the transmission place B begins to hear again that the appeal of its 
ID is further. Henceforth, it answers the appeal of the transmitting agency A with 
holder-in-bad-faith C in the disguise of the transmission place B, and it performs 
appeal at the transmission place B which began to hear the appeal of its ID on the 
contrary with it. [ in the disguise of the transmitting agency A ] Of course, holder-in- 
bad-faith C is preparing the capacity to change one's ID to any ID. since it is not the 
same time of day above that the transmitting agency A and the transmission place B 
return to the original condition since the synchronization of a mutual procedure shifts 
— such two — it can become completely and holder-in-bad-faith C can perform an 
action. It is because the time of day when the transmission place B begins to stand 
by in the following event the transmitting agency A, respectively differs primarily, the 
events set as the object of a time-out also differ, so the timeout periods itself differ. 
[0007] this — it becomes completely, and by machining, it thinks that the transmitting 
agency A had a normal response from the transmission place B of normal, changes 
together with holder-in-bad-faith C from the channel establishment procedure 4, i.e., 
a procedure, it thinks that the transmission place B is the appeal from the 
transmitting origin A of normal, and changes together with [ it is the same with a 
channel establishment procedure, and ] a third person C. If it progresses to the 
above-mentioned procedure 5, it will become possible to intercept in the form where 
holder-in-bad-faith C relays commo data in between [ mutual ], without being known 
by the carrier of Both A and B device currently regarded as having secured the 
channel only by two persons, this — becoming completely G'unction) — if it uses, C 
can alter the public key which A should send to B, for example, and it can substitute 
for the public key corresponding to the private key which C prepared beforehand 
secretly. By this, the cryptocommunication way originally built between A and B 
becomes effective only between A and C, and it becomes the cryptocommunication 



way which C set up independently between C and B. That is, the encryption data sent 
from A are decrypted by C, and again, another encryption is applied for the encryption 
channels between C and B to them, and they are transmitted to it. The same is said 
of the reverse transmission. Having established the encryption channel with normal 
procedures, both A and B are a public key's being substituted secretly on the way, 
and not noticing the substitution, and bring a result intercepted. Such an attack 
(tapping depended for becoming completely) is called Man-in-the-middle attack. 
Since the encryption channel itself is safe, it becomes important [ ensuring whether 
both who communicate are sharing the really same public key as dealing with such an 
attack ]. 
[0008] 

[Problem(s) to be Solved by the Invention] As a method of coping with Man-in-the- 
middle attack, expressing the individuals ID (usually a partner's identifier etc.) 
indicated in the certificate as a transmitting agency and a transmission place, and 
carrying out a visual comparison is also considered using the certificate which a 
certificate authority publishes. However, cost starts issue of a certificate at this. 
Moreover, when using a certificate authority, in order to attest by registering an 
identity, its identity will be opened to a communications partner and the problem that 
anonymity cannot be maintained also exists. Furthermore, when using the service 
which specifies a user from a public key like a yellow page (Yellow Page), the secure 
network connection by the telephone line etc. is required, and transaction cost starts. 
[0009] The purpose of this invention is offering the verification system for ad-hoc 
radio which can prevent effectively the alteration of the data based on spoofing to a 
communications partner, the data transmission-and-reception system for ad-hoc 
radio, the verification approach for ad-hoc radio, the data transmission-and-reception 
approach for ad-hoc radio, the record medium that recorded the program of 
correspondence on a list and that reach and distribute, and distribution equipment, 
when sending and receiving data between the data transmission-and-reception 
equipment mutually connected by ad-hoc wireless connection. Other purposes of this 
invention are offering the verification system for ad-hoc radio which can omit an 
exchange of the password by oral or memorandum writing, and cannot use the 
certificate authority which does identity public presentation, but can verify a 
communications partner efficiently, smoothly, and correctly, the data transmission- 
and-reception system for ad-hoc radio, the verification approach for ad-hoc radio, 
the data transmission-and-reception approach for ad-hoc radio, the record medium 
that recorded the program of correspondence on a list and that reach and distribute, 
and distribution equipment. 
[0010] 

[Means for Solving the Problem] According to the verification system for ad hoc radio 
and approach of this invention, the data for identity data generation to another side 
from one side of two data transmission-and-reception equipments mutually 



connected by ad hoc wireless connection Delivery, The identity data generated with 
one data transmission-and-reception equipment based on the 1st generation 
algorithm from the transmitted data for identity data generation is made to output to 
one's identity data output section. Moreover, the identity data generated with the 
data transmission-and-reception equipment of another side based on the 1st 
generation algorithm from the received data for identity data generation is made to 
output to one's identity data output section. It is judged whether the identity data in 
the identity data output section of both data transmission-and-reception equipment 
is mutually in agreement. 

[0011] Since the distance of both data transmission-and-reception equipment needs 
to contrast the identity data in the identity data output section of both data 
transmission-and-reception equipment mutually, it is less than 10 etc.m with which a 
user (user) can keep company between both data transmission-and-reception 
equipment in several seconds typically, and is several m preferably. Suppose at the 
identity data generated based on the data for identity data generation that you may 
be the data for identity data generation itself. Identity data is set as what the 
judgment with the identity data mutually in agreement in the detection data output 
section of both data transmission-and-reception equipment tends to perform. If the 
software for verification started in both data transmission-and-reception equipment 
is generally the same, the generation algorithm same for generation of identity data 
will be used from the data for identity data generation. However, the user of both data 
transmission-and-reception equipment fixes suitably one in two or more generation 
algorithms on the spot. 

[0012] One data transmission-and-reception equipment generates identity data based 
on the 1 st generation algorithm from the transmitted data for identity data generation. 
The data transmission-and-reception equipment of another side generates identity 
data based on the 1 st generation algorithm from the received data for identity data 
generation. And it means that being correctly transmitted to the data transmission- 
and-reception equipment of another side from one data transmission-and-reception 
equipment, i.e., a data integrity, was verified, without judging whether the identity data 
outputted from the detection data output section of both data transmission-and- 
reception equipment is in agreement, and altering the data for identity data generation 
on the way, if in agreement. Thus, a data integrity is efficiently verifiable. 
[0013] According to the verification system for ad hoc radio and approach of this 
invention, identity data is visual or acoustic-sense-identity data. 
[0014] An image, a numeric value, alphabetic characters, or those combination are in 
visual identity data. As an example of a vision display of identity data, when identity 
data is a total of n-bit bit data, n bits is classified by every [ a bit, such as 
continuing, ], and there is a histogram which makes as a partition in the direction of a 
x axis, and is made into the quantity for every partition in the direction of the y-axis. 
As an example of an acoustic-sense display of identity data, the sound of the height 



corresponding to the quantity of each partition of the above-mentioned histogram is 
outputted in an order from the partition of lower order. As for identity data, it is 
desirable that that a user tends to judge smoothly and correctly the coincidence of 
identity data and the inequality in both data transmission-and-reception equipment to 
be is chosen. 

[0015] According to the verification system for ad hoc radio and approach of this 
invention, identity data should be outputted with the output gestalt of visual and 
acoustic-sense-both in the detection data output section. 

[0016] With the visual output gestalt of identity data, even if the things in both data 
transmission-and-reception equipment are similar, in the acoustic-sense-output 
gestalt of identity data, a difference is clear or that case of being reverse exists. The 
accuracy of a judgment of coincidence and an inequality increases by contrasting 
both the visual output gestalt of identity data, and an acoustic-sense-output gestalt. 
[0017] According to the verification system for ad hoc radio and approach of this 
invention, a function A operator, The input of this operator and the result of an 
operation of this operator are defined for the numeric value on which this operator 
acts as the output of this operator. The same or the serial operator train which 
arranged in one or more pieces and a serial a different operator which starts a 
tropism function on the other hand is established, use the input of this serial operator 
train as the data for identity data generation, and let the output or its correspondence 
value of this serial operator train be identity data. 

[0018] On the other hand, there is a Hash Function (Hash Function) in a tropism 
function. The operator also contains the thing only with one piece in the operator 
train which carried out [ above-mentioned ] the definition. By on the other hand 
making a tropism function participate in generation of the identity data from the data 
for identity data generation, the difficulty which finds out the data for identity data 
generation from identity data increases, and possibility that a holder in bad faith will 
do a data alteration using the data for identity data generation of a false similar to the 
true data for identity data generation falls. In addition, the more serial arithmetic child 
queue length becomes long, the more it becomes impossible in computational 
complexity to find out the data for identity data generation from identity data. 
[0019] According to the verification system for ad hoc radio and approach of this 
invention, it is judged whether the 1st generation algorithm generates two or more 
identity data, and its things in the identity data output section of both data 
transmission-and-reception equipment correspond mutually about each identity data. 
[0020] Possibility that two or more identity data of all is similar is very low. The 
accuracy of verification improves by generating two or more identity data and judging 
whether the things in the identity data output section of both data transmission-and- 
reception equipment are mutually in agreement about each identity data. 
[0021] According to the verification system for ad hoc radio and approach of this 
invention, a function A operator, The input of this operator and the result of an 



operation of this operator are defined for the numeric value on which this operator 
acts as the output of this operator. The same or the serial operator train which 
arranged in two or more pieces and a serial a different operator which starts a 
tropism function on the other hand is established. Use the input of this serial operator 
train as the data for identity data generation, and the output of two or more operators 
chosen from all the operators that constitute this serial operator train, or its 
correspondence value is used as identity data, respectively. It is judged whether 
about each identity data, the things in the identity data output section of both data 
transmission-and-reception equipment are mutually in agreement. 
[0022] According to the verification system for ad hoc radio and approach of this 
invention, a function A operator, The input of this operator and the result of an 
operation of this operator are defined for the numeric value on which this operator 
acts as the output of this operator. Prepare two or more mutually different operators 
which start a tropism function on the other hand, and the data for identity data 
generation are considered as the common input of each operator. The output or its 
correspondence value of each operator is used as identity data, respectively, and it is 
judged whether the things in the identity data output section of both data 
transmission-and-reception equipment are mutually in agreement about each identity 
data. 

[0023] According to the verification system for ad hoc radio and approach of this 
invention, the data for identity data generation are the public key of one data 
transmission-and-reception equipment. 

[0024] If the data for identity data generation are the public key of one data 
transmission-and-reception equipment, it is verifiable that the public key which the 
data transmission-and-reception equipment of another side received is a public key 
of one data transmission-and-reception equipment with verification of identity data. 
Therefore, it carries out sending a common key etc. to one data transmission-and- 
reception equipment from the data transmission-and-reception equipment of another 
side by the cryptocommunication using the public key of one data transmission-and- 
reception equipment etc., and cryptocommunication with the common key between 
both data transmission-and-reception equipment can be established completely. 
[0025] According to the data transmission-and-reception system for ad hoc radio and 
approach of this invention of using the above-mentioned verification system for ad 
hoc radio The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function by the ad hoc radio verification system to the personal digital 
assistant with a radio function of the user of another side is verified A public key Kp 
is transmitted to a personal computer with a radio function from a personal digital 



assistant with a radio function in each user. The personal computer with a radio 
function of the user of another side The common key Kc is generated from the 2nd 
generation algorithm. One user's personal computer with a radio function Based on 
the information transmitted using the code by the public key from the personal 
computer with a radio function of the user of another side, the common key Kc is 
generated from the 2nd generation algorithm, and data are henceforth sent [ the 
personal computer with both the radio function ] and received in the code based on 
the common key Kc. 

[0026] According to the data transmission-and-reception system for ad hoc radio and 
approach of this invention of using the above-mentioned verification system for ad 
hoc radio The personal digital assistant with a radio function and the personal 
computer with a radio function which are owned by each user exist. It is connected 
with the channel with secure each user's personal digital assistant with a radio 
function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function by the ad hoc radio verification system to the personal digital 
assistant with a radio function of the user of another side is verified The personal 
digital assistant with a radio function of the user of another side The common key Kc 
is generated from the 2nd generation algorithm. One user's personal digital assistant 
with a radio function Based on the information transmitted using the code by the 
public key from the personal digital assistant with a radio function of the user of 
another side, the common key Kc is generated from the 2nd generation algorithm. 
Next, data are henceforth sent [ the common key Kc is transmitted to a personal 
computer with a radio function from a personal digital assistant with a radio function 
in each user, and / the personal computer with both the radio function ] and received 
in the code based on the common key Kc. 

[0027] According to the data transmission-and-reception system for ad hoc radio and 
approach of this invention The personal digital assistant with a radio function and the 
personal computer with a radio function which are owned by each user exist. It is 
connected with the channel with secure each user's personal digital assistant with a 
radio function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function to the personal digital assistant with a radio function of the user 
of another side is verified A public key Kp is transmitted to a personal computer with 
a radio function from a personal digital assistant with a radio function in each user. 
The personal computer with a radio function of the user of another side The common 
key Kc is generated based on the 2nd generation algorithm from a public key Kp. One 
user's personal computer with a radio function Based on the information transmitted 
using the code by the public key from the personal computer with a radio function of 
the user of another side, the common key Kc is generated from the 2nd generation 
algorithm, and data are henceforth sent [ the personal computer with both the radio 



function ] and received in the code based on the common key Kc. 
[0028] According to the data transmission-and-reception system for ad hoc radio and 
approach of this invention The personal digital assistant with a radio function and the 
personal computer with a radio function which are owned by each user exist. It is 
connected with the channel with secure each user's personal digital assistant with a 
radio function and personal computer with a radio function. If having been transmitted 
without altering one user's public key Kp from one user's personal digital assistant 
with a radio function to the personal digital assistant with a radio function of the user 
of another side is verified The personal digital assistant with a radio function of the 
user of another side The common key Kc is generated from the 2nd generation 
algorithm. One user's personal digital assistant with a radio function Based on the 
information transmitted using the code by the public key from the personal digital 
assistant with a radio function of the user of another side, the common key Kc is 
generated from the 2nd generation algorithm. Next, data are henceforth sent [ the 
common key Kc is transmitted to a personal computer with a radio function from a 
personal digital assistant with a radio function in each user, and / the personal 
computer with both the radio function ] and received in the code based on the 
common key Kc. 

[0029] The secure channel of each user's personal digital assistant with a radio 
function and a personal computer with a radio function is established by the two-way 
communication by for example, each user's private key. The personal digital assistant 
with a radio function contains what is called PDA (Personal Digital Assistant). Hiding 
computing (Hidden Computing: explain the gestalt of implementation of invention in 
full detail) as an example of the style of work of a businessman is considered. In 
hidden computing, transmission and reception of data are wanted to be performed, for 
example without an alteration in personal computers with a radio function, such as 
Note PC. If it is verified in such a case that the user was transmitted to the personal 
digital assistant with a radio function of another side, without altering the public key 
Kp of one personal digital assistant with a radio function on the way from contrast of 
the identity data in the identity data output section of a personal digital assistant with 
a radio function The verification is made to take over to both users' personal 
computer with a radio function, and cryptocommunication can be smoothly carried out 
with the common key Kc between personal computers with both the radio function. 
[0030] The program which the record medium and distribution equipment of this 
invention record and distribute, respectively is the thing of the following contents. 
The data for identity data generation to another side from one side of two data 
transmission-and-reception equipments mutually connected by ad hoc wireless 
connection : With delivery and one data transmission-and-reception equipment The 
identity data generated based on the 1st generation algorithm from the transmitted 
data for identity data generation is made to output to one's identity data output 
section. With the data transmission-and-reception equipment of another side The 



identity data generated based on the 1st generation algorithm from the received data 
for identity data generation is made to output to one's identity data output section, 
and it is judged whether the identity data in the identity data output section of both 
data transmission-and-reception equipment is mutually in agreement. 
[0031] As for the program which the record medium and distribution equipment of this 
invention record and distribute, respectively, the thing of the following contents is 
added further. ******. 

: Identity data is visual or acoustic-sense-identity data. 

[0032] As for the program which the record medium and distribution equipment of this 
invention record and distribute, respectively, the thing of the following contents is 
added further. 

: Identity data is outputted with the output gestalt of visual and acoustic-sense-both 
in the detection data output section. 

[0033] As for the program which the record medium and distribution equipment of this 
invention record and distribute, respectively, the thing of the following contents is 
added further. 

: The input of this operator and the result of an operation of this operator are defined 
for the numeric value on which a operator and this operator act a function as the 
output of this operator, and the same or the serial operator train which arranged in 
one or more pieces and a serial a different operator which starts a tropism function 
on the other hand is established, use the input of this serial operator train as the data 
for identity data generation, and let the output or its correspondence value of this 
serial operator train be identity data. 

[0034] As for the program which the record medium and distribution equipment of this 
invention record and distribute, respectively, the thing of the following contents is 
added further. 

: It is judged whether the 1 st generation algorithm generates two or more identity 
data, and its things in the identity data output section of both data transmission-and- 
reception equipment correspond mutually about each identity data. 
[0035] 

[Embodiment of the Invention] Hereafter, the gestalt of implementation of invention is 
explained with reference to a drawing. Drawing 4 is the flow chart of the whole code 
data transmission following verification and it of a data integrity. A 
cryptocommunication open request side and a requestor side-ed are defined as a 
transmitting agency and a transmission place, respectively, and A and transmission 
place data transmission-and-reception equipment are set to B for transmitting 
agency data transmission-and-reception equipment in drawing 4 . the transmission 
origin of the public key for data-integrity verification and the transmission place, and 
the transmission origin of this transmission after data-integrity verification (code 
transmission using a ******** right [ that ]:common key) and a transmission place do 
not need to be in agreement, and may be reverse, and a transmitting agency and a 



transmission place may interchange suitably in this transmission after data-integrity 
verification. 

[0036] Processing of drawing 4 is explained in order. 

(a) A transmits ID (this ID is hereafter called "ID 1 ".) which specifies its public key Kp 
and identity data generation algorithm as B with a cryptocommunication way open 
request A generates identity data Xp to coincidence based on its own public key Kp. 

(b) B sets to Kx the data received as a public key Kp of A to A. If there is no 
alteration of data on the radio-transmission way from A to B, it will become Kx=Kp, 
and if there is an alteration, Kx will become what has another Kp. B generates identity 
data Xx with the identity data generation algorithm of ID1 with the assignment [ A ] 
with origin of Kx received from A. The example of identity data is explained in full 
detail in below-mentioned drawing 5 . 

(c) The user of A and B verifies whether the identity data Xp and Xx by which it was 
indicated by the output, respectively is the same to the display of A and B. If it is 
Xp=Xx, a judgment that Kx=Kp is meant and there is a data integrity in the channel of 
A-B will be made. 

(d) B enciphers ID (this ID is hereafter called "ID2".) which specifies the random- 
number value R and common key generation algorithm for common key generation 
using the public key Kp received from A, and transmits to A. About ID2, that A and B 
use the same communication software etc. can omit transmission between A-B like 
ID1, if ID2 is being fixed. B uses a common key generation algorithm for coincidence 
from the random-number value R, and generates the common key Kc. 

(e) A decodes the enciphered random-number value R which was received from B 
using the private key corresponding to a public key Kp, acquires the random-number 
values R and ID2, and generates the common key Kc using the common key 
generation algorithm of ID2 from the random-number value R. 

(f) A-B sends and receives data by the encryption communication link based on the 
common key Kc henceforth. 

[0037] The identity data displayed on the identity data output section of A and B may 
be the data for identity data generation (for example, the public key of A itself) itself. 
That is, fatbits of the public key of A is carried out to the data for identity data 
generation of A and B. However, numerically, since it is hard to read, the digital 
readout of a public key may be changed into image display. Drawing 5 shows the 
histogram as an example of the identity data generated from the data for identity data 
generation. A vision indication of the identity data is given at the verification image 
display section 27 of data transmission-and-reception equipment 20 ( drawing 6 ). 
Identity data is expressed in sequence to the area of the number of bits equal in from 
LSB to MSB in the public key by the histogram which makes a break and an axis of 
abscissa an area and makes an axis of ordinate the quantity of each area that the 
data for identity data generation are the public key of A. Since the data Kx for 
identity data generation which the public key Kp of A became completely by the 



holder in bad faith in the middle of the transmission line, and B received from A when 
there was no **** crack **** are equal to the data Kp for identity data generation, 
they serve as Xx=Xp. Therefore, the user of A and/or B or other verification persons 
who can trust it If the display of A and B is seen directly, Xp and Xx which are 
displayed on the display of A and B are contrasted (comparison) and both are in 
agreement It judges that the public key of A has been transmitted to B as it is from A, 
namely, judges that there is a data integrity, and if both are inharmonious, it will be 
judged that there was an alteration of data in the middle of transmission to B from A. 
[0038] However, the difference from the small similar public key of the Hamming DISU 
wardrobe of the precision of human being's recognition capacity may be undetectable 
only by generating the comparison image of a histogram like drawing 5 simply 
necessarily highly. Then, to a public key, on the other hand, a Hash Function etc. may 
change into predetermined data with the application of a tropism function, and may 
display verification images, such as a histogram, for it. in this case — even if it is 
going to ask for another public key which outputs the data with which the third person 
who is going to perform ********** is similar — dispersion — a logarithm a 
problem will be solved and it is impossible in computational complexity. However, the 
amount of information of the verification image to create may be broken by 
exhaustive search, when very small compared with the bit size of a public key. Under 
such conditions, to the data which already applied the tropism function on the other 
hand, new data are computed, or, further on the other hand, new data are computed 
with the application of another one direction nature function to a public key with the 
application of a tropism function, and another verification image is generated. Two or 
more verification images can be generated and the reinforcement which receives 
becoming completely by using this can be raised with repeating this actuation. 
[0039] Identity data is not limited to an image like a histogram, but may be shown to a 
user, and combining two or more of those data. [ using the display of alphabetic data, 
change of a scale etc. ] As acoustic-sense-identity data, the value of the direction of 
an axis of ordinate of the histogram of drawing 5 is made to correspond to the height 
or the tone of a sound, and the sound corresponding to the value of each area is 
outputted to sequence for every predetermined time from the area of Hidari of the 
direction of an axis of abscissa of drawing 6 . Moreover, you may make it make 
identity data output from both a vision drop and the loudspeaker as a sound emission 
means. 

[0040] Drawing 6 - drawing 8 show the method which generates identity data from 
the data for identity data generation on the other hand using a tropism function, 
respectively. Data D1 mean the data for identity data generation, and data D2, D3, 
and D4 and ... mean identity data. Moreover, an one directivity each function functions 
as a operator, acts on an input, and outputs the result of an operation. On the other 
hand, a tropism function is a Hash Function (Hash Function). 
[0041] In drawing 6 , a time, on the other hand, the 1st time makes the tropism 



function F act on the data D1 as data for identity data generation, and data D2 are 
obtained. The loop formation which the tropism function F is made to act on them 
while it is the same to data D2, namely, contains the tropism function F on the other 
hand is formed, and the 2nd data D3 are obtained. Henceforth, loop-formation 
processing is repeated and D4, D5, and ... are obtained. After repeating the loop 
formation of the count of predetermined, the final result of an operation is set to Dn, 
this Dn is used as identity data, and this identity data is indicated by vision at the 
verification image display section 27 of data transmission-and-reception equipment 
20 ( drawing 10 ). It not only indicates by vision at the verification image display 
section 27 of data transmission-and-reception equipment 20, but only the final result 
of an operation Dn may make it make the verification image display section 27 of data 
transmission-and-reception equipment 20 indicate some of D2, D3, D4, specific or 
all by vision by screen separation or time sharing, and you may contrast it about each 
which was displayed. Even if the judgment of the coincidence and the inequality about 
those one identity data is confusing by contrasting two or more identity data, 
possibility that the judgment of coincidence and an inequality will become confusing 
about two or more identity data of all contrasted is very small, and can improve the 
accuracy of the verification about a data alteration. 

[0042] In addition, when D2, D3, D4, and ... all do not come out and it contrasts 
specific [ some of], the protection reinforcement to a holder's in bad faith attack 
becomes high by changing the combination (Subset) about the some suitably. 
[0043] plurality which is mutually different in drawing 7 — on the other hand, prepare 
the tropism functions F, G, and H and .... the one directivity each functions F, G, and 
H and ... are made to act on the common data D1, and each results of an operation 
D2, D3, and D4 and ... are obtained. It contrasts about each which the verification 
image display section 27 of data transmission-and-reception equipment 20 was made 
to indicate by vision, and was displayed on it by screen separation or time sharing by 
using some of D2, D3, D4, specific or all as identity data. 

[0044] In drawing 8 , two or more one side tropism functions F, G, and H and ... which 
are mutually different are prepared. A time, on the other hand, the 1st time makes the 
tropism function F act on the data D1 as data for identity data generation, and data 
D2 are obtained. A time, on the other hand, the 2nd time makes the tropism function 
G act on data D2, and data D3 are obtained. In this way, the one direction nature 
function of the next step is made to act on the result of an operation of the preceding 
paragraph one after another, and two or more D2, D3 and D4, and ... are obtained. It 
contrasts about each which the verification image display section 27 of data 
transmission-and-reception equipment 20 was made to indicate by vision, and was 
displayed on it by screen separation or time sharing by using some of D2, D3, D4, 
specific or all as identity data. In addition, two or more methods of contrast can be 
considered to be the same special examples which used the tropism function F on the 
other hand in the method of drawing 8 instead of [ in drawing 6 / mutually different ] 



on the other hand using a tropism function. 

[0045] Drawing 9 is the block diagram showing the method which asks for identity 
data combining processing of drawing 6 - drawing 8 . The identity data computing 
type of drawing 6 - drawing 9 is defined as Types (Type) 1 , 2, and 3, respectively. The 
data for identity data generation are inputted into the left end of drawing 8 , and 
identity data is outputted to the right end of drawing 8 . The example of an array of 
drawing 9 can choose two or more types from Types 1, 2, and 3 which are examples, 
can arrange them in order of arbitration, and can obtain the data for identity data 
generation. 

[0046] Drawing 10 is the block diagram of data transmission-and-reception equipment 
20. Since data transmission-and-reception equipment 20 becomes the transmitting 
agency A by the case, or became the transmission place B and is carried out, it 
combines the configuration as a transmitting agency, and the configuration as a 
transmission place. The public key of A which the transmission verification section 24 
outputted its own public key to the verification image generation section 26 when 
data transmission-and-reception equipment 20 was A, and received as a transmitted 
and received data 31 from A in the communications department 25 when data 
transmission-and-reception equipment 20 was B is sent to the verification image 
generation section 26 via the transmission verification section 24. The verification 
image generation section 26 generates identity data from the public key which 
received from the transmission verification section 24, and the generated identity 
data is displayed on the verification image display section 27. Users, such as an owner 
of A and B, contrast the identity data in the verification image display section 27 of 
two data transmission-and-reception equipments 20 by which ad hoc wireless 
connection is made, investigate coincidence and an inequality, and input the result 
into the verification result input section 28. The input result to the verification result 
input section 28 from a user is notified to the transmission verification section 24, 
and it is judged that the transmission verification section 24 has a data integrity about 
the public key transmitted to B through the transmission line of ad hoc wireless 
connection from A when a notice that both identity data is mutually in agreement is 
received. Next, when data transmission-and-reception equipment 20 is B, a random- 
number value is generated in the random-number generation section 34, and the 
common key generation algorithm of ID2 generates a common key in the common key 
generation section 33 from the random-number value generated in the random- 
number generation section 34. On the other hand, the random-number value and ID2 
which the random-number generation section 34 generated are enciphered based on 
the public key of A in decryption / encryption implementation section 32, and the 
code data Dc is sent to A through a transmitted and received data 31. Moreover, 
based on the generation algorithm of ID2, a common key is generated from the 
random-number value R, and it is saved in the key preservation section 35. When data 
transmission-and-reception equipment 20 is A, the transmitted and received data 31 



of the code data Dc transmitted from B is decoded with its own private key in 
decryption / encryption implementation section 32, the random-number values R and 
ID2 are acquired, a common key is generated based on the common key generation 
algorithm of ID2 from the random-number value R, and this common key is saved in 
the key preservation section 35. Henceforth, when transmitting data, a common key is 
pulled out from the key preservation section 35, transmit data is enciphered in 
decryption / encryption implementation section 32 based on this common key, and it 
transmits to the other party as a transmitted and received data 31. When receiving 
data, it is received and enciphered and a transmitted and received data 31 is decoded 
in decryption / encryption implementation section 32, the Taira data are saved at a 
hard disk (not shown) etc., or predetermined processing is performed. 
[0047] Drawing 1 1 is the flow chart of the communications processing by the side of 
the transmitting agency A. A public key Kp is transmitted (S40), the identity data 
generation algorithm of ID1 generates identity data Xp from this public key Kp (S42), 
and identity data Xp is outputted to the verification image display section 27 (S44). In 
S46, if their own identity data Xp and the identity data Xx of the transmission place B 
are contrasted and it is judged that it is the same, it will progress to S48, and if it is 
judged that it is inharmonious, this program will be ended as an error (a data integrity 
is not accepted). Although it progressed to S52 and the random-number value 
receiving latency time carried out predetermined time progress, when there was a 
data integrity and it judged that reception of the random-number value R from the 
transmission place B received the random-number value R in waiting (S48) and S50, 
when there is no reception of the random-number value R, this program is ended as 
an error. In S52, the code data of the random-number value R from the transmission 
place B are decoded with their private key, and the random-number value R is 
acquired. [ of correspondence in said public key Kp ] Between the data transmission- 
and-reception equipment of A and B, ID is beforehand fixed about two or more 
common key generation algorithms, respectively, and ID (an example ID2) adopted as 
this common key generation algorithm in the transmission place B has been 
transmitted to the transmitting agency A from the transmission place B together with 
the random-number value R. In this way, in S56, based on the common key generation 
algorithm of ID2, the common key for the communication link with the transmission 
place B is generated from the random-number value R, and B and an encryption 
communication link are henceforth started using this common key (S58). 
[0048] Drawing 1 2 is the flow chart of the communications processing by the side of 
the transmission place B. A public key Kx is received from the transmitting agency A 
(S60). Since the holder in bad faith may intervene and may be altered by the 
transmission line between A and B, this received public key is made to express it as 
Kx instead of Kc. Next, the identity data generation algorithm specified by ID1 sent 
together with a public key Kp from the transmitting agency A generates identity data 
Xx from Kx (S62), and identity data Xx is outputted to the verification image display 



section 27 (S64). In S66, if their own identity data Xx and the identity data Xp of the 
transmitting agency A are contrasted and it is judged that it is the same, it will 
progress to S68, and if it is judged that it is inharmonious, this program will be ended 
as an error (a data integrity is not accepted). When there is a data integrity, the 
random-number value R is generated (S68). The random-number value R The data 
which enciphered ID2 as ID of the selected common key generation algorithm with the 
public key of the transmitting agency A out of two or more common key generation 
algorithms this time are transmitted to the transmitting agency A (S70). The common 
key Kc is generated according to the common key generation algorithm of ID2 (S72), 
and A and an encryption communication link are henceforth started using this 
common key (S74). 

[0049] Drawing 13 is an explanatory view which establishes the cryptocommunication 
way of ad hoc wireless connection among the users whom it hides and a computing 
style uses. It hides, and a user dedicates a computer to a bag etc. and computing 
(Hidden Computing) means the use gestalt which operates this computer by remote 
control using radio etc. from pocket devices, such as PDA (Personal Digital 
Assistant-ersonal Digital Assistant) at hand. 82 with which PDA80a etc. is equipped is 
a communication link device. [ when performing ad hoc radio between the devices 
(notebook computers 88a and 88b in the = bags 86a and 86b) which have not 
equipped the system which can check the data integrity of a public key which was 
described above ] A cryptocommunication way is indirectly established using PDA 80a 
and 80b which mounted these notebook computers 88a and 88b and the 
cryptocommunication way establishment protocol which has secured the secure 
channels 90a and 90b to beforehand. In addition, a channel secure [ between PDA and 
a notebook computer ] is attained by cryptocommunication with the common key 
fixed in advance for example, among both. In drawing 13 , a channel 84 is first 
established between PDA80a and 80b in a procedure (a), the public key of one PDA is 
transmitted to PDA of another side, and the data integrity of this public key is verified. 
Next, in a procedure (b), the data-integrity verification between PDA80a and 80b is 
inherited to the notebook computers 88a and 88b connected with each PDA 80a and 
80b according to the secure channels 90a and 90b. Specifically, this succession is 
attained by transmitting notebook computers 88a and 88b through the secure 
channels 90a and 90b in the public key which had the data integrity verified between 
PDA80a and 80b. Henceforth, after sharing a common key through the channel 92 
between both, data are sent [ notebook computers 88a and 88b ] and received in a 
code with this common key. 
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[Brief Description of the Drawings] 

[Drawing 1] It is drawing showing the room to which holder-in-bad-faith C intervenes 
among both while the transmission place B has not noticed the transmitting agency A. 
[Drawing 2] It is drawing showing the 1st part of an example of a means for a holder 
in bad faith to enter the location of C of drawing 1 . 

[Drawing 3] It is drawing showing the 2nd part of an example of a means for a holder 
in bad faith to enter the location of C of drawing 1 . 

[Drawing 4] It is the flow chart of the whole code data transmission following 
verification and it of a data integrity. 

[Drawing 5] It is drawing showing the histogram as an example of the identity data 
generated from the data for identity data generation. 

[Drawing 6] It is drawing showing the 1st method which generates identity data from 
the data for identity data generation on the other hand using a tropism function. 
[Drawing 7] It is drawing showing the 2nd method which generates identity data from 
the data for identity data generation on the other hand using a tropism function. 
[Drawing 8] It is drawing showing the 3rd method which generates identity data from 
the data for identity data generation on the other hand using a tropism function. 
[Drawing 9] It is the block diagram showing the method which asks for identity data 
combining processing of drawing 6 - drawing 8 . 

[Drawing 1 0] It is the block diagram of data transmission-and-reception equipment. 
[Drawing 11] It is the flow chart of the communications processing by the side of the 
transmitting agency A. 

[Drawing 12] It is the flow chart of the communications processing by the side of the 
transmission place B. 

[Drawing 13] It is the explanatory view which establishes the cryptocommunication 
way of ad hoc wireless connection among the users whom it hides and a computing 
style uses. 

[Description of Notations] 

10 Ad Hoc Radio Communications System 

80a, 80b PDA (Personal Digital Assistant with a radio function) 

88a, 88b Notebook computer (personal computer with a radio function) 
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*m?>o£t%o »3t©si=#cttssfflftB©js 

^f^3-lXft^l^5tC-r*o £©B&&T\ 5MfflrcBtt 
; Tr©/'fX©¥ll^n6 l ^:l^©T\ ±IB#ll4icS^L 

TiS«7tA ^6©#ii4 icfew-s-fey -> a yfimzm-o 

Tl^*„ Slfi7LAtt#lli4lC«MS^©T\ JMfl^Bli 
*'fA7C hftlcWl, g»© I D©fftf#W"*B<tt 
»g(cM*o -^v 3Sfi7tAttiMfi5feB!b^5©JS^*M#6 
ft:6^©T\ ^-ri,77h^tCSJt^UI DWWt 
* (#111) 0*y, 5Sffl7cA«h3l« 

5feBttS^©#|II©H^l!'y^<fe5tLT, *ftf 
ft©*-r/w"7 KT?*©Sc»tc*^o* s tc©«McM 
*;!<!: lt%* 0 

[0 0 0 6] MS©*Z#Ctt, JifflTcA^SSIllL; I 

D TJPf TiftHr* £ -f s > ^ic^fc-tr^a l, mizm 

€5feB^SSi»©l D©P?ri*Ht ; &PJ¥^46*^-f 5 

fijc A ©^TifrlttcSffl^ B tcj« y T $ LT(S« U S 
»ICS^© I D©P?U : !bHt^P»^^46fc^t7cBtCiSffl 
7cAlCJ8y-r*LTP?tffrW-£f??. «0tt, **©*= 
#Clii:-©J;3^ I Dictg»© I D4Sfb*-Hr*S6* 
LT^«. ±K-pSSffi7c A tiSffijfc B E»^©# 
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[0 0 0 7] Z.CD1&V t%LXmz£-?T. 2l«rcA 
tt, IE*g©>iifI$t B fr6 iE*ftJ6»tf » o t JRo T. 

wnhirm y #n 4 j: y n .|©!s:e# c <t- 

-mzmm%« ±mms%T*mts£. =#©^t;i 
irbhmi t /c t m o r p# a , b ow&omsm 

iztti 6 *l5 C t & < Mm©3lH# C Sl^F^Tilffix 
-*t«H"*»7»W SCi^RFtgtt^So £©$ 

r©4iMSI* C tf5fc#A, LT, C fl^ttffla LtcM®M 
L fciiMS <*: t »J 5 C £ #7* *. CfUCcfc 
oL **AtB©F^T«IS?*x5Bg^]®{i^t*A<!:C 
©IHTWa^abtcfc Us C £ B t<Dm\t C SUKI§/£ L 
tcViWMimttzZv o$y, Afr52S6*ifc«<KbT 
-5H*CT«*fb**U ««Ci:B©BB©«f^biifll» 
Blc»J©W»{fc : &aB*ftTe3&**i*. *©$©€£ 
A i: B (i«[cJi^#liIT-Bf^bJiif S&£ 

3„ £©<fcd&i» (jat»J-r*LKJ:*ia«l) £Man-in 
-the-middle attacking BWft5MMg#tt££"P 
S3frS, £©<fc?&i£S^©»$Q<hLT^ ilftfSS 

[0 0 0 8] 

[«BM»^LJ:3i:f ^iiM] Man-in-the-middle at 
tack©J«;£i: LTti, BEWa«>flMTr«EttV**!l 
fflLT. SEESflfcEKStifdaA I D («£*!#©* 

TlStiS. UPU Ctltctts IP/»©5gmcPXh# 
£ left y » E«,tt=&fio c <h t^o r&mtbft 

1±T%o £61^ -flP-^-v* (Ye I I ow Pa 

g e) (oidtcttiMWSWffl^ifsr**- ex* 
*WHra*?*y, h5>+f^->3 vux 

[0 0 0 9] *56E©SWttu 7K*y*JWttt>llc* 

y SEtcsoi* t - 2 a&s£nra?x— * sassr 

7 K*'y?i^®<ifflx-*&g->Xx^ 



XxL. 7K*-y?«iSffJlx-*3M§i'XxZ^ 7 
[0 0 10] 

[■i«i»ar*fc»a)#8a *bw©7 K*y**«i 

j: y ffliKsaasns 2<i©x-*ssg£n©- 
Sfr6fls*'N«iE7 f -^ suffix— >*sy» ->3©7 

y * 1 ©Sfi27/U J'J XAlcS^LNT^filL/c^lIx- 

x- ^ SISSHTtts S« L fc«M7- * *.®m x- ^ 
J: y n 1 ©tfig7;l/dfy XAtcS^TSfiKLft^lix 

§g{i©«iix-'? tt^WlEfcW- *«BEr— > tfflEK 
-Kr^A^^J^^tlS «fc 3 KftoTW. 
[0 0 1 1] jt|x-^JMSgS©»(is Sx-^^§ 

IB*a— «f (I0ffl#) tH»S»Tff**T** 1 OmJ-Xrt 

fc»-3^TSffl Lfc^EEx— 5* KW:8Et-*£jS 
fflx— ^^©^©T'^oTbcfcl^fSo ^iix-^ 
it. Mx—? iM§gB©«ajx— ? ffi7]SI5lCteW^^E 
x-^ ^IStC-SSt LTC^A s Sfr©fy^Tt^^t> 
©lci§£3-*i3o -SStttis Hr-^SfS*BKfet"T 
iS«*nT^4ttIiEfflV7 h^iil-TSn«\ «SEx- 

* * fiEffl x - 9 tf 6 ^SE x — * ®^S©fc46 ICH-©^ 

;Udfy XA©F«g© 1 1I*. Hr-*aa««<0a- W 

^■©sucei^Taii, m y ?*A6fc y -r s * 3 ic^ o ti^ 

[0 0 12] -^©x-^iMSiiStt, ^IL/c^SEx 

-9S.fS.mT-* <fc y jk i ©sj«7/ua*y xaics^x^ 

TttBx-***^*. ft2/3©x-^^S^S«. § 

€ l fcttET - ^ i^ffl x - * «fc y m i ©^M7; i/ d~ y 

XAlcS^L^T^aEx— 5f=&Sfig-r5c ^LTs Br- 

* is§^B©«aj x — ^ aj^as^s m ft * *i*«kt- 

fix— ?^fflx-^6\ a+lCfc^T*#A/*tl«C 

<!:^<, -^©x-^s§^a^effi*©x-^JiSg 

«'MEL<€2l*ftT^*Ci:* f&t)-6x-^^14 
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[ooi3] *5gs^7 Ffrvvm^mmmmw-sT-T 

[0 0 14] flatWSttEx-^lctt* life t&fe X 
h-fOT*K#U x**|r1'MZ», ylfcSfc^&EtfC 

[0 0 15] *5PJ3©7 K*y^SSMSMIfflttlI-> 

[0 0 16] WET-^oaMttB^BTtts Pi? 8 - 
*3ig£Btt:£tt*t>©l]±#S(MLT^T*K 8K7 

l>^-gr©¥iJ£©IE5itttf B $ 3 o 

[0017] *mw<D7 F*v?fflmmmim*sz?- 
mm** 1 «j-x±, ■5uictt^fc«j«iaiji : fW*w*. 

[0 0 18] -3&lSttBWc(*fljl»/\yS/alW (H 
ash Function) tf253„ ±fB^«L.fc;S» 
?3Kctt, ^S?*MfflLfr&l^©t>$A/?V3 0 & 
If- * «/l x - * it 6 ©«1I x - * ©£fiSfc-£ ft 

-sssfflf- s«*ji , 3W'ffl-rH»ttflyi*u Mm© 

W=* KOttSE x- 2 £fiM x- £ fcSfcW>fifcDttE 

f-jifflf-^ft^i, x— jfa?A/*r«Rrti 

ISjWSTT*. iff- £fr5£SEx— $*£fiEffl 
[0 0 19] *?gB.B©7 K*7^^aifffl«ijE->Zx 

r-*«tsfe y, s^mx-sk 



[0 0 2 0] MMOttBr-S^tfMKLTt^Rr 
IHttt«a6Tfil\ OTEr-**WML SfiEU Sit 
KEx—JUco^Ts Hx*-*2Sg8fi©«Ex'-*tll2] 

spice w- 5 ti ©n±*^i:tt-a-r s *»s^*w£ 

ZZtK&Vs 8WE©IEltl4tflRl±T5. 
[00 2 1] #5tW©7 K*y^«aKi«fflttaE->Xx 

^»tf*£K«fc*itf. Hasan?. R»K?fl4^ffl-r 

RiI?jaifx^©A73£l$Ex-2£j&fflx-' ? <t Lx 

t-«U 8WE7- 5rt£o^T» Hx-^iiggS 

*refr*ffl!£* ft« «fc 3 left o Tl^*. 
[0 0 2 2] *5§B^£D7 K*yf j»i«jiflfflttE->Xx 

/*atf*aicj:titf» nss«»xv R-;s»?*Mtffl-r 

4»ffi£K3**F©A*K RSSrF©3iJM61il£R;S» 

x-*BSSB©MIx-*aiaSfc33tt5t,©ia±tf 
[0 0 2 3] #5P.3©7 K*'y?«affiffl«iE->Xx 

ujktfftmz ct; tits; iif- * 3eem x- * i*-£© 

[0024] ilx-? SJtffl x- * #-£© x- £ jM 
S8B©iiB§«T*»til& ttBEr-^0«BElE«fey» ffl 
73 © x - £ iiSHStfSIf L ft 4i las 5 -* © x - £ jH 

fctfoT, f673 © x - * &§gBfr S -*© x - * i£§ 
© x - * &gl£a©:2«£ffl l^fcflWjM 
K«fcy0J*tf#iISl**sS4SLT\ fflr-*2SSBB 

[0 0 2 5] M3©7 K*'y?«IS««$tEyXxi* 

zmm?%*mm7 k*v ^«s«fflx-^^g-> 
oaflia^* si*a*i:}is«fflflHSffif?t* / 1 v □ v t 
»HM6W*/<y □ y t a 7^5WissT-e«'tiT 

-+f©^51ff^«?-jiw4i*^6fte73©a-+f'©« 
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fclffgleS^^T^MK c £M2£D3E/£7/b=Jy XA 

3MIK cics-iKBWK^yT-^ssssr*. 

[0 0 2 6] mmcOT K*y^JMKMIffl«E*>Xx/» 

xxAarwaicttifcr, #a— vie* ym**n««n 
«SBaffl«lffiW*»tWffl* i MBMNMBtt*/ < V 3 > <t 

33 y > 7 K* v ^«S3ffi«II->X7^lc J: y 

a#A,* n5 c t * < eassnfe c t tfttSE* *ia ^ 

c£JIS20£l87Jl/JyXA#S£j8U -1j<DJL->f 

jrux^sftiau ttiaKcii§i- tricjs 
«saK c icg^< Bg^tc £ y T-**a&g-r*. 

[0 0 2 7] *»9i®7 K*>> ^flRUKSfifflx— >«S 
ftytiiffittffif^t J§«* tasttaflMWEtt* / \° v a > 

#8E**l*^ 4JMSIK P Ji*a-1fKfi^TJft»ii 

4iBI^Kpfre«ii8IK c*m2<Difig7;nryx^ic 
S^T£iSU -£©a-tf©««^ffi«ffitt*/ty 

T«il^Kc^m2©^7;HfyXAfr6Sfi2U M 

[0 0 2 8] *^<D7 K^y^ftBBfiifllfflT— 

-yxx^&tf^aictti^ #n--9Hcj: ym^*ti« 

MMGMMtK^^ttWII* £ JWKWBWBfiHf ' t V a > 
l£MHNBtt$ / \° y =i v <h -fe * a 7 ftJUiSST'Stfti 



+f <D'&mm k p tfusnTA,* *i* z. t ts. < easstifc c t 

J6MKc*lll2©4«7';l/dyXA*6fifeia 

B»*fflt^eaS**lT*n:1IWWC»^T*6«iK c 
£*2©£ja7/U:JyXAfrS£fiEU ftililK 

*/<yavtt, w»» ttS^K ciuB-SKBfWciyT 1 

[0029] «a-if©J»«GlfflaMi^*«!W**t»l 
WMNI£tt$/ \° V □ V t <0-b* a 7ft»fllB t tt, «! 

fctf. tr<DWflsajc«!:*fflsaffiK <fc yajtsn 

5o fctt>IfI*flgtt*«*«l*M:P D A (Person 
al Digital Assistant) tm$tl 
Stco^^to try^.X^vrottSrox^ 0ili: 
LT<OHUZ!>lfa— x-o^ (Hidden Com 
put i n g : 9BH®fttt«>$8(c£</tTf£G) 
StlTl"*. HLnytfa-x-f V^THi, 
h P C*Oflftl*iiflWIIBW*/<V3 VW±-P, *#A,ft 

}|»Bfflffi«MI^*fle*4iii*©4iBI86K p 

c tit < fi!!*©}««BifflMitgf** *wffi*'\esi 

*tlfcCi3b^H?tl5<!:, *<0«fflE*Pi3.— yo«B» 
*/<yn V©B?J8HiK c lei y B*iffi*P35tlcj| 
[0 0 3 0] *^^OlB^ii#StfflB«SS3b^tl ; ? s tl 

iB^stfiBffl-rs xp ^ '5 Aw^rtsctwes^o 

: 7 h^v^}lil»»tttc«ty*BStESS«*ti5 2ffllOr 
*3iy» -*Or-*2iS««TW:. JMflLfc^iir- 

>saif-*j: y * i ©SB£7/udfy xaics^t 

->£flfflf->«t'JI! 1 ©^7/UJ "J X/aICS^ 

Er-* tfSSfc-a-T *i* «fc 3 left 

[003 1] *«WOI3«a#aiffiB«*11tf*tl^tl 

[0 0 3 2] *38E©KSffi#&imf§£«tf*ti* , ft 
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*«©W£©lii*)»»?m*l**l3 J: o left -sTf*. 
[0 0 3 3] *58W©IBS«E»aiffi3ffl(e«fi<*ti ; Ptl 

len&uMit sxp Att^ortsotiODfl 5 * s k 

H-XttJlft*-*lRl14B8ai!:««3tII?* 1 «ttiu 
^SlT-SiMf-^tL Blt$]ail?9Ja>tU 

[0034] *»woiBa«f*atflEffis»!!j«*n^ti 
ja-r*tifl!)T*»j. s«iix-^tco^T, ?iT-*a£ 

Sfcf 3 iPffiMrfflJE* ti* * 5 left -pTI^o 
[0 0 3 5] 

lK«ILTMt?„ E4l*x-*^£tt©8IE& 
S£A. eSJtx-^SSSSIlSBtLT^S. 5 s -- * 

fcwweas) ©e^stfesi^iii. -aLTi/*«i& 

W*ft<s jS»?*-3Tt»«fcl"U x-^^tttt 

Ea<D*easri4* eaiTuatfeajjtttisi:* xnmt> 

[0 0 3 6] H4©ftia%)(i#lClKWr*. 

(a) AW\ BKRM^BHRBR&ttlcgaofiH 

D («T» C<D ID? M D1j if9. ) tasar 

(b) BiMfrSAeDSMMMpfcLTgfltLfcx-* 

r-^©a#A,tfft^fttf, k x = k p tftUs a?fc 

tfaoftfcf, K xl*K ptttgiJCOtCDtftSo Bl;J:Afr6 
It-: 2£/£7;U:Jy X^TttEx-* X x 

5o ttiEx-*<D0!iM:s «asoH5ic*5^T»air*. 

(c) A, B©a-+fti> AStfBODa^gPtC-5-tl^tl 
aaWStftlfcfcEr-* X p , X x tfBHT***»5 
6^«SEt«, tU Xp = Xx?fc*l(#, Kx = Kp 
«**U A-B<&affl»lCliT-*££tttfS*£0 



(d) Bl*A#S5MLfc£lll«Kp£ffi^T» ftilll 

I D (J-XTv CCD I D* r | D 2j tw5„ ) <h£ 
Ba-§"ffcLTx A'ViSHi-ri.c ID2lCO^Tttv A, B 
^|B)-CDi®€V7 h £ffifflT3Hs I D 2 tflI££ftT 

i^fte«\ i d i tmmiz. A-BM©e3Stt*«? 
a*jsi*t£»«k c s^rs. 

(e) AttBfr6S«LfeBi^b*n/-ca»«R*» £ 

1 D2£4», attfilRfrS I D20ttS^fiSi7 7 /Hf 
U XA*ffl^T«ii«K c 

( f ) un. a — b lis ttiigi k c ic»-3 < mmmm 

[0 0 3 7] A, B<88aET-*ffl*jSMC»5Vr38SflE 
ai«l*Oti©T*-3Tt.J:t\ A, BcDtt 

filS^^ii^S^SSSLTt Ja\ 11 5 tt«BEr- 

2 x- * 5 L fctlx- £ ffl-fll £: LT<7) 
t7h^7A?,Tt. ttSE7 s -^tt7 ; -*2IS««2 0 

(H6) OttBEB««SBS2 7lC»jeaS*tl*. fltfE 
T-^Sfigfflx-^^AOiiM^S^i: LTx 
*L S Bfr6MSBf?*»U^y hftaEttKJMI 

ma k P a\ eaiBca* ic * y a y r 

$ LtffrfoftTl^ftttfttf; Btf AiUSfllLfeSfflEx 

lc^UV0T\ Xx=Xp<tft5„ LfctfoT* AM/ 
/Xl*Bc7)a-+f, x««fiT-$5ffi©«E#(i. A, 
B(JD*S&*iIl& JIT» A, B©«3?ffllC«^*tiT 
l/>*Xpat/Xx*Wib (ttW U RVff-ttLTk'' 

tWKU -rftfc^x-^^tt^^tfJBfU M# 

a frs b 'soDeas^* icx-^ o* 

[0 0 3 8] LfrU AM©B»(i6730«att*f Lt. 
^<ft<. H5<Dcfe5ftt:X h?'5A<rjtb$xi!^£mS$ 

^HatiDJiL^^tlJT^ft^Ji^A^So ^CT\ ^ 

«S«6J:3tLTt., «tt*f»HH*»< Ctfcftytt 
»MWlc^pItg7-$^o fc/cU f^fi2-r*«6tEil«Olf 

aa^iiBia© tr » h v-r xicjt^TSttT'j^tMi 
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m Ltc y » gy©-*iRittH»*4iBiatEaffl \jzmttts. 

[0 0 3 9] SEf->tt, tXh^5L k ©«t5ftia« 

a— tflcttLTiftKLfcy LT*J:i\ WlftftWEx 
©*fiXttefelC*KS*-tts B6<B**liaiS!l©£©E« 

TOT. e-* tomtits &imt% cfc 5 It LTfc cfc 

[0 0 4 0] H6Ha8tt-:£fcttM»*ffifflLTttfiE 
x f - * x - * S SSx - ' * ZSLl&t * 
*l^*l^LTV3= x-£ D 1 teJ&IEx-SSfcJ&fflx- 
£3&iti*U t-?D2, D3, D4, • • • lilir 
*fc, *-*iRi1tH»Bs ;S*xi:L 

t*bu AMzitmLT. aweiisai^-rs. -* 

lRlttH»tt«yjl«/ vy vilStHash Fund 
ion) T'££>„ 

[0 0411 06m 1@@liriif-^iar- 

-*D2&f§3. 2mmt, ?-* D 2 ICH-<0-£|p] 
ttH»F*flFB*tf, T&fctk -£ftttHIiF£^t,- 
/I/-7WBJSJU r-*D3S»5. WPfc /b-^SfiS 
*«yjgU D4, D5s • • BflfeBttO/U 
-^SByjILfcSL §HWS:)l»mDniL C 
©DnSMf-^tU C0£iEx-$£x-$HS§ 

gM2o ®io) (Dmm®m7x&2 7fc®.nmm 

EB®«^SI52 7lC^St»^-r5^W-T^<s D 2 , D 
3, D4, • ■ • ©<8£©&OfrXtt^&x-$iMg 

2 o ©ftiimsa^gp 2 7 izwmm^mmftm-t: 

WmmlStt ztizu mmiEtitc^^mz-o^X 

y, fct^tieoifico^iEx-^icouTO)— a • 

x-SKDT^Tlco^T-a • T-^OfflJEtfttSfcL 
<a*^rlgtttt«i6T'h*<» x— ?cS#A,tCO^T© 
«BEOiE«tt*lRl±-p*4. 
[0 0 4 2] D2, D3, D4, • • • t0£gBT* 

lCO^T©ffl^t)-tf (Subset) SMT 
*«fc3fcl/CJ3<E£li:<fcy, BfEflDSII=#<0a»U:*f 
-f*K«BSW:B<&3. 



[0043] 07 TH*. ffiSfcJ*&**»B<D-*lRltt 

h«f. g, h, • • -*mmu Ka©f-*D1K 
s-*ipitti8»F. g, h, • • • *ftmiE#. &m 

S3ID2, D3, D4, • • D2, D3, D 

4, • • •<0l#3t<J!)*O*^Xtt^ffi*«liEx-^tL 

t, x-^ssssn 2 o <D$EEB&am$ 2 7 icbe# 

[0044] msT-a. ftmcm%zffl&m<D-i5faii 
w&f, g, h, • • • zmmtZo 1 aa&^iix- 

«Kffl<Z>D2. D3, D4, • • D 
2, D3, D4, • • • 0»i£<D«OfrXtt£**tttiE 
x'-2<hLT. r-*3SS«B2 0fl!)SfflEB««aW2 
7 KBB#iyxttB3#*JTl»JI£®!** ftsstin:* 

ttH»*ffifflr *«t> y iciwi-cD-* [Pitt iiistF 

[0 0 4 5] IS 9 lilll 6 HI 8 0ffl3I£!i§fc£fo£Tfc 
mT-$Z#®Zl5ttZm?7nv<7mT:&%o H16~ 
E9©^x-*»S£5£**ft* , *l*-f'7 (T y p 
e) 1. 2, 3££»LTl/»*. 0 8 flXfeflKcSBEx- 

* %.®m x- * # «r*u h 8 <»&mz&w?- $ 

IH»* tl*. m 9 CDiB?iJ^Jtt-^JT-S 2 f 7 1 , 
2, 3frS2ffl«±©*'f7«gS?U *ti6*flE*© 

[0 0 4 6] HI Ottx— ?5HSSB2 0(D7P'y^B 
TS*. x-^2SSKB2 0tt» a^tctyesiTuAic 

s«2ofl«A-p*««^t::«, easmES2 4u« i» 

(045M«*«EB«4fi!tS2 6'Ma*U *^ x— ? 
3M§^S2 0^BT^^«^tc«, iMa?2 5K6^T 
A^SOaSSffix-^ 3 1 <hLT§«LfcA<7)^W« 
eaSttiE»2 4*»SLT«EB«fe«»2 6^6tl 
^. ttBEB«Sfi8BP2 6ti€iS«IE»2 4^6SW-fc4J 
BB«fr5ttiEr-**aiaU Sfi8**lfc«IEx-*B 
SSSEB»S5^2 7H:S^tl5, A, B£DF/f##H© 
a.-+ftt. 7 K*-7 ^*S8.^*tlT^5 21S(Dt-$ 

A7DSP2 8lCA7Dti>o a-W6©«liBB*A*»2 

8's©A^iB*tte2SttiiW2 4'saa**v esiME 

352 41*. H«BEx-*tffflStc-aLT^«t©iia] 
^SW-ftS^lcii, Afr* B'nz K*y ^MMSIKoe 
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flESttf i D 2tf«*t • flHMbSI»»3 2lCfc^TA£D 
iiHaicS-^^TBi^b* *U *<DBg^r— * D c 
SHlT-r £3 1^LTA^2l5ftS= aJMlR 
frS I D2<D%.f8,7>m)XUtm-3^T&mm%:£.I$, 

u *ft*««ss53 5 T-^sasa*fi2 

Otf A?»3*£fctt, B^SeSStTtlTJRfcBWx- 

* d c (D^sfix— ? 3 1 *a^k • vsmtnim 3 2 

lcfe^TS»©«WSilcJ:ytt#U aRttR&tfl D 

2 m aiMR^e 1 D2 0)±ta^fi!67 7 /u=r | jxzx 
KB-^TftiisifcSEEKu s±taa^a«#gP3 5ic 

T-r z&Mmtzmtii*, m&m 

3 5*6*BHi«i#aiuT» Rtta«ica^TSS« 

=r-**®.mt • Bg^b*fiS§53 2lC6^T*WkU 

assflT-^3 1 <t LT*a#^aifi-r*o x-ssg 
«-r*»£tt. §MtLfcwwb*tiaHWiT— ? 3 1 * 

• MfkMM 3 2 tcfelvrflWU 

[0 0 4 7] 01 1«£^AflJ©ii{i«lJl©7P-'f 
+ -h?*5o iiBMKpfciiSffil. (S4 0) , R£M 
«K pfrS I D 1 ©ttEx-^S^HT'JXAK^y 
WET--*Xp*£«L (S42) , WEr-*Xp* 
ttHB««S»2 7KllS*-r« (S4 4) o S4 6T- 

\t. iftattET--* x p teasst b amt?-* x x 

-RtWWStulxtt. 17- (x-*££14tfBttSft 

#s«*ftic& €sjtB*i^©aafiiR©sfi*(#-B 

(S4 8) , SSOlcfel^T* !SL»1iR*SfllLfttfiJ 

Ifc l7-tLTK^P^5A*»7-r*. S5 27- 
(*, €3% B S ©SLiMI R (DBg^x- * £ MIBiW 

k p Ks*ns©s»©wffia-pa* lt, sjmir 
% a a, Bo^-^inssBiHTttaasffloftiias/K 

t*s y , mm b icfc^T#ii(DftjiasfiK7';i/j y x 

AtLTSfflSftfcl D («Ttt, I D2) tffLftftR 

t-«tcesijtBfr6eas7cA's3i«**iT*T^*. 

£3 LTv S 5 6Tti, ftSffiRfrS I D 2 (Dftiifl^E 

lar/i/jyx^ica^TSSftitBtcfflflifflcftiMi 

*&8U titfc Kftiltt&ffl^TBtflH^bHflSBB 
J&T* (S 5 8) o 
[0 0 4 8] HI 2tte£ftBflJ©ji«gcQ7P-x 



eai7cA^54iBBS!Kx*sfl-r5 (s 
6 0) . z<D&mLTc£mMits a, Bmcoimmm 

iiie-r^o *tc jasfliTcA^saiHiKptHBicas 

tiT*fc I D 1 T^^tl^SEEx-^^Z/UJUX 
AlEj:yKxfr68ET-*Xx*£jffiL (S6 2) % 

bse^-* x x zmm®m*®2 7 izmntz (s 6 

4) . S6 6TB, l#©ttIEy r -*Xx4:g3£7GAa> 
OTEt-- ZXptZiHkLT, pl-tipJBr**ltl(#» S 
6 8-^.*^ ^^ttfJBftftltlWf. X5- (x-*SS 

£. x— $r££tt#S«*&(Cl& a»«R*afi8L 

(sea), nmmt, wmowsn&KriW) 

<D I DtLZO I D2t*3Hi7cA©45B«aiK«fcyB» 
fbLfcT-*«3ifll7uANaifllL (S70) , I D2© 

(S72) , j-xb, mgm&mvTAtnmtam* 

m&tZ (S7 4) o 
[0 0 4 9] mi 3(iPltl=l>kfa-x-<>^X^Y;U 

mm&zm&t sbhjiei?**. m=i v tr a - t 1- v 

^ (Hidden Computing) <htt. JL— tftt, 3>tfa— 9 
*®Wim®, #7t©P D A (^rttS4S* : P e r s 
onal Digital Assistant) i|(D 

«Jtfl5r*fJffl»**«i»r*. P D A 8 0 a ^tc« 
*^1TL^8 2lia€f ;, M'-f X?'3d3= ±lBle2E'<fc <fc 

{§LTl^t^» (=IS8 6a, 8 6 b CD*©/- h/\° 
V3> 8 8 a . 88b) mVT K*v f *»5i«%fT5 
Jt^te33^Tx Ctie/-h^V=]>8 8a, 8 8b£ 
*BUlC-b*a.7 7 ^tSS9 0a, 9 0bS«ffiLTl^5 
Bf^jiflKFJSXP h=l^^H^LfcPDA8 0a, 8 

PDAt/- h/^v z\yt<Dffl<D-b*3.7%mmmt. 
mxim%?3?mm izw y ;*a6 e nr ^sftiiate <fc s 

B§^OTKJ;y>iJ3e£*i3„ HI 3tcfe^T*r#« 

(a) TiiffK84=&PDA80a, 8 0 b BT'MISL 
T, -*©PDA©fiBMI*ftS*©PDA'Nf53SLTx 
KliFjaWx— S»^tt*ttEr«. #10 (b) 
iCfcl^T PDA80a, 80b P^COf- ?^tt«E 

^tl?'tlC0 P D A 8 0 a , 8 0 b<t-b*3.7S®ffi 
B90a, 9 0bfc«fcySHB*ftTl/>*>'-h/ty3V 
8 8a, 8 8b'^B3t-r«. il(7)ffl^«v M^WtCli, 
PDA80a, 80bM?T-*^^14*«ME**l^:45 
M«*-b + a7'«:iiffl»9 0a, 9 0b*^LT/-h 
/ \V □ > 8 8 a , 8 8b Zfcmt % CtlZk V m®*tl 
5o /-h/tV3V8 8a. 8 8 bit* M#F«3© 
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mim9 2*ftLT&mM*mLrcm. R&isttc*: 
m 1 ] hI'(s7ca taifBjtB fctffttt/m^sTPi* 

[H 2 ] »SE©»=#fi«B1 1 "3 C ©ffi»tc a y &t#p 
[03] »K<3D«=*tfH1OC<0ffi«tCAyatr#P 

9<D-mt LT<DHX H^ASgVTHTS*. 

So 

* SSBEx-* *£fiRT * HI 2 ©SSC*** BITS 

So 



[08] -SlRlttHRSffifflLTSfflEx 

So 

[09] 06~08©ffig£ffl&£frt!:T&ilT-££ 

[010] t-S!S§8Ii07p -y 

[H 1 1 ] G^5LAflJ©afflSaScD7n-x^- 

So 

[mi 2] easjtBffiij©aflmiia©7P-^+-hT f * 

So 

[Hi 3] Hfta>tfa-x-rv^*-r;l/©MfflT* 

[?$^©1KBJ1] 

i o T 7 K* y ^«3»l->XxiA 

80a, 80b PDA (MMSfgtt^Sf^tffg 

88a, 88b /- h A°73> (ffitKlfflttflgtt£ 



[02] 



& — -0 




i 
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7 PVh 

(5D int. ci. 7 m,mm% fi mm) 

H0 4L 11/00 3 1 OB 

(72)5PM SP S-fe F 5J104 AA07 M08 AA16 AA41 EA04 

tt«JII!S*»iPT»Pai623#i|fi14 B^T 7 EA10 EA19 JA21 JA29 KA01 

* • \L- • XA*SC#tt J6*S«W&ffi KA05 LA01 NA02 NA11 NA12 

p*g NA24 

02) WM tjss * 5K033 AA08 BA08 DA17 DB2 ° 

#^IIJS*«TtT«Pai623»«J14 B*7 5K067 AA33 BB04 BB21 DD17 DD53 

-f • • XAttaStt *MSWW3fim EE02 EE10 EE16 FF23 FF25 

A HH22 HH23 HH36 



